199 results about "Expiration Time" patented technology

Various aspects of the present disclosure relate to an authentication server function (AUSF) that receives an authentication request from a security anchor function (SEAF), and transmits a data request for authentication data to unified data management (UDM). The AUSF can receive the authentication data from the UDM for primary authentication, and set an expiration time for security information associated with the primary authentication being successful. The AUSF can then transmit an authentication message of authentication information that includes the security information and the expiration time to an authentication and key management for applications (AKMA) anchor function (AAnF) that registers the expiration time. The AUSF can also initiate reauthentication based at least in part on expiry of the authentication information.

The invention discloses a certificate management method and device, computer equipment and a storage medium. The method comprises the following steps: reading certificate information in a system; judging whether the certificate expiration time in the certificate information is smaller than a set threshold value or not; and if the time from the expiration of the certificate in the certificate information is smaller than a set threshold value, alarm information is sent out. By implementing the method, service interruption or data security risks caused by expiration of the certificates can be effectively avoided, continuity and stability of application services are ensured, the workload of operation and maintenance personnel in the aspect of certificate management is reduced, the operation and maintenance personnel do not need to manually check the expiration time of each certificate, and the operation and maintenance efficiency is improved. The automatic management mode not only reduces the operation labor cost, but also improves the operation and maintenance efficiency, and the technical scheme can be applied to the fields of medical treatment and finance.

Disclosed herein is a method and system to determine whether a payment terminal has been tampered with based on a comparison of attestation data received from the payment terminal, for example in an offline mode when an otherwise secure remote server cannot be reached. If the determination yields that the request has been approved, the terminal generates an attestation ticket having one or more validity conditions, wherein the validity conditions include expiration time that indicates the time after which the attestation ticket becomes invalid. The attestation ticket can be used as long as it is valid or until another trigger causes the ticket to be invalidated or regenerated.

The invention discloses a trust evaluation method and system based on credit dynamic access control. The trust evaluation system executes an access control strategy through an access control contract in a block chain; the access control contract verifies the access request through the access request information and the credit score of the main body node; after the verification is passed, the access control contract issues the access permission token, so that the main body node does not need to repeat the access request process before the expiration time of the access permission token, and the delay is improved; the credit evaluation contract also records all access behaviors in the block chain and dynamically updates the credit value of the access behaviors, so that when a negative access behavior occurs, the punishment intensity is greater than the award for positive access, and the discovering cost of the medical Internet of Things equipment is increased; meanwhile, after each access behavior is finished, the credit score needs to be updated in combination with the historical access record of the current equipment, so that the accuracy and fairness of the credit score are ensured.

This disclosure describes systems, devices, and techniques for managing resources in an enterprise network using lifecycle prediction. In an example method, a resource may be identified as operational within an enterprise network. An initial lifecycle of the resource may be estimated based at least partly on one or more characteristics of the resource. At least one trigger condition associated with the resource may be identified as having occurred. In response to identifying that the at least one trigger condition has occurred, an updated lifecycle of the resource may be estimated by applying at least one rule associated with the at least one trigger condition to the initial lifecycle. An expiration time of the resource may be determined based on the updated lifecycle. The resource may be replaced in advance of the expiration date of the resource.

The invention discloses an authority management method and system for double-token decoupling and dynamic token mapping, and relates to the technical field of information security. According to the method, a user identity is verified in a unified identity management system; receiving the user identity identifier in the target subsystem and generating a local permission token based on the permission model; in the token mapping service, when it is detected that a mapping relation is not established, the user identity identifier, the target subsystem identifier and the time slice identifier are combined according to a preset sequence, a one-time random factor is inserted, and a mapping key is generated through two-time abstract calculation of different secure hash functions and key parameters; determining a unified expiration time based on a smaller value of the validity period of the double tokens, generating a mapping value by using the exclusive key of the target subsystem in an encryption manner, and storing the mapping value, the mapping key and the expiration time in a distributed cache in an association manner; and the validity of the identity token is verified and the corresponding local permission token is obtained during user access, so that cross-system security access is realized, permission data migration is reduced, and compatibility and security are improved.

The invention discloses a token synchronization method and device based on micro-service, equipment and a storage medium, and relates to the technical field of application software development, and the method comprises the steps: analyzing a target request comprising a first token to obtain token expiration time; and if the current time does not exceed the token expiration time, judging whether the remaining effective duration is greater than a target duration threshold, if the remaining effective duration is not greater than the target duration threshold and a token refreshing mark does not exist, setting the token refreshing mark in the preset cache database, refreshing the token, and issuing an obtained second token to the front-end micro-service, the front-end micro-service accesses the back-end micro-service based on the second token; and calling the independent micro-service to analyze a first token issued by the front-end micro-service to obtain the user identifier, so that the independent micro-service accesses a preset cache database by using a key generated based on the user identifier to obtain a second token, and accesses the rear-end micro-service based on the second token, and enabling the back-end micro-service to transmit the access response information to the independent micro-service for processing. Therefore, the token synchronization efficiency can be improved.

The invention relates to a double-token authorization refreshing method, device and system based on dynamic expiration tolerance. The method comprises the following steps: modeling the dynamic expiration tolerance according to the number of requests per second qps of a key API, the response time Tresp of the key API and the utilization rate U of a database connection pool; for a first request of which the access token is expired and the refresh token is not expired, if the expiration duration of the access token corresponding to the request is within the corresponding dynamic expiration tolerance, setting a distributed lock for the request, triggering a token refresh mechanism at the same time, and after the token refresh mechanism is executed, releasing the distributed lock; and for a subsequent request of the first request, if the expiration duration of the access token corresponding to the request is within the corresponding dynamic expiration tolerance, the token refreshing mechanism is not triggered, and normal access is directly allowed. According to the method, modeling is performed on the dynamic expiration tolerance, and the pain points and the problems that in the prior art, expiration tolerance time parameters are fixed, and static configuration is not flexible are solved.

The invention discloses a data processing method and device, electronic equipment and a storage medium. The data processing method comprises the steps that in the execution process of subtasks, whether a preset Redis task lock exists or not is detected, the Redis task lock has expiration time, and the Redis task lock appears when execution of each subtask is completed; if yes, executing a timed task for querying the execution state of the parent task; if the parent task does not exist, the timed task is not executed, and the parent task comprises a plurality of subtasks. The method can utilize the Redis task lock to decouple the state updating frequency of the parent task and the subtask, avoid invalid query caused by overlarge execution completion time interval of the adjacent subtasks, and adopt the timed task to query the execution state of the parent task after detecting that the Redis task lock exists, thereby reducing the database performance pressure caused by frequent query of the parent task state, and improving the query efficiency of the database. Updating of the parent task execution state is triggered in time, and the updating efficiency of the parent task execution state is improved.

The invention relates to the technical field of interface security verification, and discloses an intelligentization-based client back-end interface calling security judgment method, which comprises the following steps of: S101, acquiring an operation log of a user according to a preset time interval t in a preset time period T; s102, performing data cleaning on the operation log of the user to generate a feature sequence; s103, inputting the feature sequence into an expiration time evaluation model, wherein an output value represents the token expiration time; step S104, refreshing the expiration time of the token in the cache according to the token expiration time output by the expiration time evaluation model; according to the method, the nonlinear mapping relation between the operation log and the token expiration time is established through the expiration time evaluation model, and pressure on the server is avoided while the security of the token is ensured through the combination of asymmetric encryption and the identifier, so that the user experience is improved.

The invention discloses a software trial time setting method and system based on a dual verification mechanism, which effectively increases a tamper-proof function of software trial time control, and comprises the following steps: step S1, a client collects equipment hardware feature information, generates hardware fingerprints, and sends the hardware fingerprints to a server; packaging the hardware fingerprint, the software version number and the application timestamp into an authorization request and sending the authorization request to a license server; s2, the server generates a dynamic encryption key according to a software version matching trial period; s3, the server encrypts the hardware fingerprint, the trial deadline and the function permission list by using the dynamic key, generates a license file after adding a digital signature, and issues the license file to the client; the method is novel in structure, ingenious in conception and easy and convenient to operate, the unique binding function of the license and the hardware equipment is effectively enhanced, the cracking resistance of the encryption key is improved, the real-time tamper-proof verification function is added, and the response efficiency of an exception handling mechanism is optimized.

A wireless communication apparatus, method or protocol for wireless STAs using CSMA / CA on a wireless local area network (WLAN). A receiver STA receives MSDUs or A-MSDUs which include an expiration time, from a transmitter STA. The receiver STA stores the MSDUs or A-MSDUs with expiration time in its receive reordering buffer of the corresponding high-throughput (HT)-immediate block acknowledgement (Ack) agreement. The receiver STA passes the MSDU or A-MSDU to a next MAC process before an expiration time of the MSDU or A-MSDU. Thus, the percentage of latency sensitive traffic packets being communicated prior to expiration is increased.

A computing device having a host system coupled to a memory sub-system, the host system having at least one processing device configured to run a garbage collection manager and a plurality of storage space tenants. The garbage collection manager can: track a history of data storage instances of data being written, according to a protocol of flexible direct placement (FDP), to reclaim units in the memory sub-system by the plurality of storage space tenants; identify, based at least in part on the history, a reclaim unit as a candidate for accelerated invalidation of valid data remaining in the reclaim unit; determine, based at least in part on the history, estimates of expiration time of the valid data; and determine, based on the estimates, whether to perform operations to accelerate invalidation of the valid data remaining in the reclaim unit.

Embodiments of the present application relate to the technical field of network security, and provide a USB key-based identity verification method and device for software, and a storage medium. The method comprises: obtaining a license and a USB key, obtaining a first hash value, a license generation time, and a license expiration time on the basis of the license, and obtaining a second hash value on the basis of the USB key; if the first hash value is the same as the second hash value, calling a USB key executable file to obtain a third hash value, a one-time token, and a USB key time; if the USB key time does not exceed the license expiration time, integrating a USB key product code, a USB key user account, a USB key hardware code, a random number, and the one-time token to obtain a fourth hash value; and if the third hash value is the same as the fourth hash value, returning a Verification Passed result. Embodiments of the present application can enhance the software operation security, and ensure that software only runs in an authorized environment, thereby protecting the rights and interests of genuine software.

The invention provides a task scheduling method, a task scheduling device and electronic equipment, and aims to solve the problem that the real-time performance of a system can be improved while the load of a CPU (Central Processing Unit) is increased by accelerating the interruption period of the system. The task scheduling method comprises the steps that a special register block is configured for each created task, and the special register block is used for dynamically storing scheduling parameters of the tasks; updating the expiration times of the tasks according to the system reference time through hardware logic; generating a ready state of the task based on the expiration times and the task type through hardware logic; the priorities and the ready states of all the tasks are compared through hardware logic, and the ready task with the highest priority is screened out; and comparing the priority of the ready task with the highest priority with the priority of the currently executed task through hardware logic, and when the priority of the ready task with the highest priority is higher than that of the currently executed task, triggering task switching interruption to an operating system, so that the operating system performs task switching according to the information of the ready task with the highest priority.

Methods, systems, and devices for wireless communications are described. An application server (AS) may generate one or more packet data unit (PDU) sets of a first periodic burst transmission. The first periodic burst transmission may correspond to a first delivery deadline at a user equipment (UE) during a jitter window. The jitter window may span a time period prior to and after a first arrival time associated with the one or more PDU sets. The AS may buffer at least a portion of the one or more PDU sets for a first duration of the jitter window. The first duration may correspond to a threshold percentage of the jitter window. The AS may output the one or more PDU sets based on expiration of the first duration and prior to the first delivery deadline.

A computing device having a host system coupled to a memory sub-system. The host system runs a garbage collection manager and a plurality of storage space tenants. The garbage collection manager can: write, to the memory sub-system according to a protocol of flexible direct placement (FDP), data of the plurality of storage space tenants to a reclaim unit in the memory sub-system; identify, after a first portion of the data stored in the reclaim unit is invalidated, first storage space tenants having a second portion of the data remaining valid in the reclaim unit; communicate with the first storage space tenants to identify estimates of expiration time of the second portion; and select, based on the estimates, the reclaim unit for acceleration of invalidation of the second portion of the data.

An authentication information storage method, system, device and product of an edge computing device relate to the technical field of edge computing, and the method comprises the following steps: receiving first revoked authentication information in response to a service instance of a cluster, according to the effective deadline of the first revocation authentication information and a preset time interval corresponding to a plurality of fragmented Bloom filters of the service instance, determining a first fragmented Bloom filter, and storing the first revocation authentication information into the first fragmented Bloom filter; and in response to the expiration of all the revoked authentication information stored in the first fragmentation Bloom filter, emptying all the revoked authentication information stored in the first fragmentation Bloom filter. According to the technical scheme, the revoked authentication information is stored in the fragmented mode according to the effective deadline, expired deletion of the revoked authentication information in the fragmented Bloom filter is achieved, a guarantee is provided for local authentication revoked inspection of the big data magnitude in the edge computing scene, the storage space is saved, and the accuracy and reliability of authentication revoked inspection can be guaranteed.

A computer-implemented method, system and computer program product for handling eviction of subprocess pods of a node. An indication to evict pods of a node in a container environment is received. Upon receiving such an indication, process information pertaining to the evicted pods is retrieved. In scenarios in which some of the evicted pods include subprocess pods, based on such processing information, those subprocess pods with a timeout that is less than a threshold value may be tagged for timeout handling. Such timeout handling involves selecting a number of subprocess pods to ensure that their parent process will successfully complete its assigned job. A schedule plan may then be generated for such selected subprocess pods, where the schedule plan updates the timeout for such subprocess pods to enable them to complete execution of their assigned tasks prior to their expiration time (timeout) even though they were evicted.

In one aspect, a device for wireless communication is disclosed. The device includes at least one processor and a memory coupled to the at least one processor. The at least one processor is configured to cause the device to: receive reassembly timer configuration information. The at least one processor is also configured to receive one or more radio link control (RLC) segments, each RLC segment associated with a sequence number (SN), wherein the one or more RLC segments are associated with a reassembly timer expiration time based on the reassembly timer configuration information. The at least one processor is further configured to: release, prior to the reassembly timer expiration time, the one or more RLC segments based on an adjusted reassembly timer expiration time. The adjusted reassembly timer expiration time is determined based on an output from a learning model of the device. Other aspects are described and claimed.

Systems and methods for a dynamic encryption model in which dynamic encryption keys are associated with an access token having an expiration time. The access token is generated for a user session of a user application seeking to make API calls to a service provider system. When the access token expires, or becomes otherwise invalid, the dynamic encryption keys are discarded, and any further API calls are made using an updated access token and updated dynamic encryption keys. The dynamic encryption keys are used to encrypt specially designated fields of API calls and / or API call results.

Methods, systems, and devices for wireless communications are described. An application server (AS) may generate one or more packet data unit (PDU) sets of a first periodic burst transmission. The first periodic burst transmission may correspond to a first delivery deadline at a user equipment (UE) during a jitter window. The jitter window may span a time period prior to and after a first arrival time associated with the one or more PDU sets. The AS may buffer at least a portion of the one or more PDU sets for a first duration of the jitter window. The first duration may correspond to a threshold percentage of the jitter window. The AS may output the one or more PDU sets based on expiration of the first duration and prior to the first delivery deadline.

The invention provides a high-concurrency and high-throughput message consumption deduplication method and device for a distributed message queue, and the method comprises the steps: obtaining a to-be-deduplicated message Key and a service type parameter, processing the synchronous or asynchronous call of a single or batch message, and generating message Key group data containing original grouping information; routing to corresponding memory queues for temporary storage according to service types to form a classification queue structure; the thread pool consumption queue is used for generating batch message Key and service type information through time-limited and batch two-dimensional batch gathering; executing batch duplicate removal in Redis through a Lua script, judging duplicate by using an incr command, and setting expiration time to obtain a processing result; and restoring the result according to the original message group and notifying the thread, and returning the Boolean value or array to the service party. According to the invention, a high-concurrency and high-throughput message deduplication function is realized.

The invention relates to a Redis-based asynchronous task security scheduling method and system, and the method comprises the steps: creating an asynchronous task, and storing the asynchronous task to a task queue for scheduling; scheduling the asynchronous tasks through atomic operation executed by the script, preferentially acquiring the overtime asynchronous tasks from the task execution set, or popping up the asynchronous tasks to be executed from the task queue, and recording the acquired asynchronous tasks to the task execution set to track a scheduling state; prolonging the maximum execution time of the asynchronous task by updating the expiration time of the asynchronous task in the task execution set; and after the asynchronous task is completed or failed, deleting the asynchronous task from the task execution set. Compared with the prior art, the scheme has the advantages that the task scheduling stability in a high-concurrency scene is remarkably improved, the task loss risk is reduced, non-blocking access and dynamic scheduling are supported, the scheme is suitable for high-reliability systems such as financial systems and industrial control systems, the system performance is optimized, and the implementation complexity is simplified.

The invention provides an application store configuration and access method, system and device and a medium, and belongs to the technical field of computers. The method comprises the following steps: configuring an application access interface to access various application types and automatically adapt to different fields required to be filled; configuring authentication information required by third-party authentication according to requirements; constructing a user role hierarchical management system, dividing a permission set according to user roles, and providing a user role editing function; classified application information is displayed in an application store, a complete application process including an applicant, an approval state and expiration time is recorded, and the functions of condition query, batch approval and approval result configuration are provided; and generating a user authorization token based on the approval result, verifying token validity and permission matching during access, and recording audit information. By designing uniform and flexible application access interfaces and processes, a layered authority management system based on SaaS users is constructed, and the operation efficiency of application stores is effectively improved.

The invention discloses a lease consistency maintenance method, system and device and a readable storage medium. The method comprises the steps that independent logic time is maintained for a virtual disk, and incremental synchronization of the logic time is executed based on a preset time interval; when the virtual disk instance in the lease-free or lease-expired state receives an IO instruction, sending a lease request to a lease server based on the virtual disk instance in the lease-free or lease-expired state; if other virtual disk instances associated with the same virtual disk in the split-brain network have no lease or the lease expires, responding to the lease request, and configuring an effective lease with a preset duration to the virtual disk instance sending the lease request; and based on the logic time of the virtual disk instance with the effective lease, updating the lease expiration time of the virtual disk instance, recording the lease expiration time in an IO instruction, and executing the IO instruction. Compared with the prior art, the method has the advantages that lease time deviation is avoided, and lease consistency under the split-brain network is guaranteed.

The invention discloses a block chain transaction processing method and device, computer equipment and a storage medium. The method comprises the following steps: in response to a cleaning instruction of a first transaction set, determining a to-be-cleaned target block from the first transaction set; wherein the first transaction set is a transaction set corresponding to a to-be-packaged queue in a transaction pool corresponding to the node; respectively obtaining transactions from the target blocks; and when the current time meets the expiration time of the transaction, deleting the corresponding expired transaction from the first transaction set, and when the current time does not meet the expiration time of the transaction, adding the non-expired transaction into a second transaction set of the transaction pool until the transaction in the target block is processed. According to the embodiment of the invention, the operation efficiency of the block chain system can be improved.

This invention discloses a data processing method, apparatus, electronic device, and storage medium, relating to the field of computer technology. One specific embodiment of the method includes: receiving a data processing instruction; obtaining the corresponding sliding window for each stored data; calculating the access parameters for each stored data; responding to a reporting instruction for the access parameters; obtaining the corresponding data identifier; obtaining the remaining expiration time of the data identifier to determine the current remaining time of the data identifier; and updating the local window lock of the data identifier based on the current remaining time; responding to a successful update of the local window lock; reporting the access parameters associated with the data identifier to a caching system; and responding to a triggering of a popularity acquisition task; obtaining the access popularity of each stored data from a preset caching system. This embodiment can solve the problem that analyzing client access data through a server requires establishing an independent server, resulting in high operational complexity and resource consumption.

The invention discloses a token life cycle collaborative management and session synchronization control method and system, and relates to the technical field of session token management. According to the method, an encryption mapping data structure is established in a main control module, the corresponding relation between a user identity token and two or more subsystem local authority tokens is recorded, and index retrieval based on user identification is supported. The main control module cooperatively completes synchronous updating of the identity token and the local token based on parameters such as token expiration time, network delay, processing delay and operation state; and when a global logout request is received, controlling the plurality of subsystems to complete local token logout and delete the mapping information according to the dynamically calculated batch number and priority sequence. All updating and logout operations are completed through a unified communication interface with identity authentication, security verification and exception retry mechanisms, an original authority control mechanism of the subsystem does not need to be modified, and the security, consistency and expansibility of cross-system session management are improved.

A storage space management method and electronic device relate to the field of computer technology. The electronic device determines a predicted life index of a data block based on the life cycle index of the file to which the data block belongs in the file system. Thereafter, the electronic device manages the storage space of the file system based on the predicted life index of the data block. The predicted life index is used to indicate the expected number of data blocks allocated by the file system from the time the data block is written to the time it expires. The life cycle index of a file is used to indicate the expected number of data blocks allocated by the file system from the time the file is created to the time it is deleted. By predicting the life of a data block and knowing the expected expiration time of the data block in advance, the electronic device can manage the storage space more efficiently, thereby reducing the management load of the storage space.